SEC-335: Eth. Hacking & Pen. Testing
HomeTech JournalsPersonal ProjectsSysadmin Wiki
  • SEC-335: Eth. Hacking & Pen. Testing
  • Breakdown
    • Course Overview
  • Activities/Assignments
    • Assignment 1.2: The Kali Virtual Machine
    • Activity 2.1: Host Discovery
    • Activity 3.1: DNS Enumeration
    • Activity 4.1: Exploiting Cupcake
    • Assignment 5.1: Breaking into Kali
  • Labs
    • Lab 2.1: Port Scanning 1
    • Lab 2.2: Port Scanning 2
    • Lab 3.1: Powershell and DNS
    • Lab 3.2: DNS uses TCP and UDP
    • Lab 5.1: Password Guessing
    • Lab 6.1: Cracking Linux Passwords with JtR and Hashcat
    • Lab 7.1: Exploiting pippin.shire.org (10.0.5.25)
    • Lab 8.1: Weevely
    • Lab 8.2: Reverse Shell
    • Lab 9.1: Exploit Gloin
    • Lab 10.1: Linux - Permission Vulnerabilities
    • Lab 10.2: Exploiting nancurunir
    • Lab 11.1: Metasploit
    • Final: Bree
  • Tools/Recon
    • Metasploit
    • NMAP
    • Active/Passive Reconnaissance
    • Shodan
    • The Harvester
    • Netcraft
    • Metagoofil
    • DNS-Enumeration
    • CEWL
    • rsmangler
    • Hydra
    • DIRB
    • John the Ripper
    • Hashcat
    • Passwords
    • TMP
Powered by GitBook
On this page
  • Usage:
  • Search:
  • Select Exploit:
  • Options
  • Payloads:
  • Run/Exploit:
  • Enter Terminal:
  1. Tools/Recon

Metasploit

PreviousFinal: BreeNextNMAP

Last updated 2 years ago

Usage:

To enter the metasploit framework typethe command below:

sudo msfconsole

Search:

You can search for exploits as shown below:

search <service>

If you want info on any of the exploits show in search type: This will pull up an html page on usage.

info <number_of_exploit>

Select Exploit:

To select exploit use the use command:

use <number_of_exploit>

Alternativity you can go straight to the exploit:

Options

Now that an exploit has been selected we need to configure the options.

To edit an option:

Payloads:

You can change the payload selected:

use <number_of_payload>

Run/Exploit:

Enter Terminal:

Below you can see how to enter a terminal from shell.

shell
python -c 'import pty; pty.spawn("/bin/bash")'
Selected exploit zero